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MEASURING 
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Examiner: Unassigned 



P RELIMINARY AMENDMENT 

Assistant Commissioner for Patents 
Washington, D.C. 20231 

Sir: 

Prior to examination and the calculation of filing fees, kindly amend the above- 
identified application as follows: 



IN THE SPECIFICATION; 

Page 1, immediately following the title appearing on lines 1 and 2, insert the 
following: 

-This disclosure is based upon French Application No. 99/09316, filed on July 15, 
1999 and International Application No. PCT/FR00/02009, filed July 12, 2000, which was 
published on January 25, 2001 in a language other than English, the contents of which are 
incorporated herein by reference. 

Background Of the TnvenHnn- 
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Page 4, before line 28, insert the following heading: 
- Description of the Tnventinn- 

Add the following Abstract: 

-Two methods for random number generation are modified to make them more 
resistant to attacks by current measurements. The methods are particularly designed to be 
g implemented in electronic devices such as smart cards, PCMCIA, badges, contacfless cards 

p or any other portable device. The DES algorithm is encrypted using a key K having a 

Q 

ft value D representing date information, to generate an integer variable I. For j ranging 
^ from 1 to m, the following steps are carried out: substituting s with s XOR I; introducing 
g in the integer variable y the result of the encryption of s with the DES algorithm using the 
Q ke y K; introducing in x, the result of y or s; substituting s with y XOR I; and introducing in 

s the result of the encryption of s with the DES algorithm using the key K. The sequence 

(x l5 x 2 , x m ) is then restored in the output. - 

IN THE CLAIMS; 

Kindly replace claims 1-8, as follows. 

L (Amended) A method for generating random numbers using the Data 
Encryption Standard (DES) algorithm with a secret key K, said method taking as input a 
random integer s of size 64 bits, and an integer m, said method sending back as output m 
64-bit random integers x lf x 2 , .... x m , said method comprising the following three steps: 
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1) With the DES algorithm and using the key K, encrypt a value D representing 
date data and put the result in an integer variable I; 

2) For j in the range 1 to m: 
2a) Replace s by s XOR I, 

2b) Put in the integer variable y the result of the encryption of s with the 
m= DES algorithm using the key K, 
© 2c) Put in Xj the result of y XOR s, 

[J 2d) Replace s with y XOR I, 

-51 

ij| 2e) Put in s the result of the encryption of s with the DES algorithm 

Q using the secret key K; and 

W 3) Return as output the succession (x l5 x 2 , . . xj. 

i y 

ry 

2. (Amended) A method for generating random numbers, said method taking 
as input a random integer s of size 64 bits and an integer m, and sending back as output m 
64-bit random integers x u x 2 , x m , by using the Data Encryption Standard (DES) with a 
secret key K, an integer intermediate variable y, and a source S of quality deemed to be 
insufficient of random integers on 64 bits x l5 x 2 , x m , said method comprising the 
following two steps: 

1) For j in the range 1 to m: 

la) Generate an integer I by means of the source S, 
lb) Replace s with s XOR I, 
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lc) Put in y the result of the encryption of s with the DES algorithm 
using the key K, 

Id) Put in x s the result of y XOR s , 
le) Replace s with y XOR I, 

If) Put in s the result of the encryption of s with the DES algorithm 
using the key K; and 

2) Return as output the succession (x x , x 2 , . . . , x m ). 



3. (Amended) A handheld, wearable, or portable device that executes the 
following steps to generate m 64-bit random integers Xj , x 2 , . . . , x m : 

1) With the DES algorithm and using a key K, encrypt a value D representing 
date data and put the result in an integer variable I; 

2) For j in the range 1 to m: 

2a) Replace a random integer s by s XOR I, 

2b) Put in an integer variable y the result of the encryption of s with the 
DES algorithm using the key K, 

2c) Put in ^ the result of y XOR s, 
2d) Replace s with y XOR I, 

2e) Put in s the result of th encryption of s with the DES algorithm using 
the secret key K; and 

3) Return as output the succession (x ls x 2 , . . ., xm). 
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4. (Amended) An electronic device according to claim 3, wherein said device 
is a smart card. 



5. (Amended) An electronic device according to claim 3, wherein said device 
is a contactless card. 

M* 

O 

Q 6. (Amended) An electronic device according to claim 3, wherein said device 

Uf 

is a Personal Computer Memory Card International Association (PCMCIA) card. 

U 

m 

O 7. (Amended) An electronic device according to claim 3, wherein said device 

€ 

53 is a badge. 

!U 

8. (Amended) An electronic device according to claim 3, wherein said device 
is a smart watch. 



Add the following new claims. 

9. (New) A handheld, wearable, or portable device that executes the following 
steps to generate m 64-bit random integers x l5 x 2 , . . ., x m : 
1) For j in the range 1 to m: 

la) Generate a 64-bit random integer I, 

lb) Replace a 64-bit random integer s with s XOR I, 



Application No. Unassigned 
Attorney's Docket No. 032326-193 
Page 6 

lc) Put in an integer variable y the result of the encryption of s with the 
DES algorithm using the key Y, 

Id) Put in X; the result of y XOR s, 
le) Replace s with y XOR I, 

If) Put in s the result of the encryption of s with the DES algorithm 
M= using the key K; and 

O 2) Return as output the succession (x„ x 2 , . . ., x m ). 

b 
m 

m 10. (New) An electronic device according to claim 9, wherein said device is a 

O smart card. 

£ 
i 

1 1 . (New) An electronic device according to claim 9, wherein said device is a 
contactless card. 



12. (New) An electronic device according to claim 9, wherein said device is a 
Personal Computer Memory Card International Association (PCMCIA) card. 

13. (New) An electronic device according to claim 9, wherein said device is a 

badge. 

14. (New) An electronic device according to claim 9, wherein said device is a 
smart watch. 
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REMARKS 

Entry of the foregoing amendment is respectfully requested. This amendment is 
intended to place the claims in a more conventional format and eliminate the multiple 
dependency of the claims. 

Respectfully submitted, 

Burns, Doane, Swecker & Mathis, l.l.p. 
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Attachment to Preliminary Amendment dated January 15, 2002 
Marked-up Claims 1-8 

1. (Amended) A method for generating random numbers using the Data 

Encryption Standard (DES) algorithm with a secret key K [that must be used only in that 
algorithm], said method taking as input a random [and secret] integer s of size 64 bits, and 
an integer m, said method sending back as output m 64-bit random integers x l9 x 2 , ...,x m , 
u said method [being characterized in that it comprises] comprising the following three steps: 

5 2) With the DES algorithm and using the key K, encrypt a value D representing 

UJ 

M' date data and put the result in an integer variable I[.]; 
;il 3) For j in the range 1 to m: 

P 2[)]a) Replaces by sXORI[.L 

£ 

Q 2[)]b) Put in the integer variable y the result of the encryption of s with the 

IJS 

§=} DES algorithm using the key K[.] + 

ITJ 

2[)]c) Put in the result of y XOR s[.] + 
2[)]d) Replace s with y XOR I[.] + 

2[)]e) Put in s the result of the encryption of s with the DES algorithm 
using the secret key K[.]^_and 

4) Return as output the succession (x 1? x 2 , . . . , x m ). 



2. (Amended) A method for generating random numbers [making it possible to 
improve the quality of a random number generator whose quality is deemed to be 
insufficient], said method taking as input a random [and secret] integer s of size 64 bits and 
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Attachment to Preliminary Amendment dated January 15, 2002 
Marked-up Claims 1-8 

an integer m, and sending back as output m 64-bit random integers x t , x 2 , ...,x m , [said 
method] by using the Data Encryption Standard (DES) with a secret key K [which must be 
used only in that algorithm], [said method using] an integer intermediate variable y, [said 
method using] and a source S of quality deemed to be insufficient of random integers on 64 

y . bits Xj, x 2 , . . ., x,,,, said method [being characterized in that it comprises] comprising the 

Q 

ig following two steps: 

Jj; 1) For j in the range 1 to m: 

y 

It; l[)]a) Generate an integer I by means of the source S[.]„ 

g l[)]b) Replace s with s XOR I[.] + 

i 

G l[)]c) Put in y the result of the encryption of s with the DES algorithm 

ny 

;P using the key K[.L 

l[)]d) Put in X; the result of y XOR s[.]+ 
l[)]e) Replace s with y XOR I[.L 

l[)]f) Put in s the result of the encryption of s with the DES algorithm 
using the key K[.]^_and 

2) Return as output the succession (Xj , x 2 , . . . , x m ). 



3. (Amended) [An electronic device implementing the method according to 
claim 1 or 2, said device being characterized in that it is a] A handheld, wearable, or 
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Attachment to Preliminary Amendment dated January 15, 2002 
Marked-up Claims 1-8 

portable device that executes the following steps to generate m 64-bit random integers x v 

x 2 x m i 

1) With the PE S al gorithm and using a key K. encrypt a value D representing 
date da t a and put the result in an integer va ri able I; 

2) For j in the range 1 to m: 

2a) Rep l ac e a r andom integer s by s XQR I, 

2b) P u t i n an i nte ger va riable y t he result of the encryption of s with the 
PES a lgori thm u sing the key K, 

2c) Put in Xj the result of y XQR s, 
2d) R ep l ace s with y XQR I, 

2e) Put in s the result of th encryption of s with the PES alg orit hm using 
the secret key K; and 

4. (Amended) An electronic device according to claim 3, [characterized in that 
it] wherein said device is a smart card. 



5. (Amended) An electronic device according to claim 3, [characterized in that 
it] wherein said device is a contactless card. 
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Attachment to Preliminary Amendment dated January 15, 2002 
Marked-up Claims 1-8 

6. (Amended) An electronic device according to claim 3, [characterized in that 
it] wherein said device is a Personal Computer Memory Card International Association 
(PCMCIA) card. 

7. (Amended) An electronic device according to claim 3, [characterized in that 
it] wherein sa id d evice is a badge. 



8. (Amended) An electronic device according to claim 3, [characterized in that 
it] wherein said device is a smart watch. 
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METHOD FOR IMPROVING A RANDOM NUMBER GENERATOR TO MAKE 
IT MORE RESISTANT AGAINST ATTACKS BY CURRENT MEASURING 

The present invention relates to an improvement in 
a method for generating random numbers or random 

5 sources, in particular sources developed in 
cryptographic systems such as random number generators 
on board smart cards. 

In particular, it is intended to be implemented in 
testing and validating electronic devices of the 

10 following types: smart cards; Personal Computer Memory 
Card International Association (PCMCIA) cards,- badges, - 
contactless cards or any other handheld, wearable, or 
portable device. 

Most public -key cryptographic systems (also known 

15 as "asymmetric cryptography" systems) and most secret - 
key cryptographic systems (also known as "symmetric 
cryptography" systems) require secret random numbers to 
be drawn. It is essential for such random numbers 
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(which subsequently serve as keys) to be unpredictable 
a priori, and not to have any regular patterns enabling 
them to be found by exhaustive or improved exhaustive 
search strategies in which the most probable keys are 

5 looked for first. 

It is possible to construct a random source on the 
basis of a function whose inverse is difficult to 
compute. Let f be such a function. It is possible to 
construct a random source by starting by selecting a 

10 random initialization variable s, and by applying the 
function f to the succession of values s, s+l, s+2, ... 
The output of the random source is defined as 
f (s) , f (s+l) , f (s+2) , . . . As a function of the properties 
of the function f used, it can be preferable to keep 

15 only a few bits of the output f (s) , f (s + l) , f (s + 2) . . . 

A method for generating random numbers on the 
basis of a function whose inverse is difficult to 
compute is specified in ANSI Standard X9 . 17 . That 
method uses the Data Encryption Standard (DES) 

20 algorithm with a secret key K that must be used only in 
that algorithm. The method for generating random 
numbers takes as input a random and secret integer s of 
size 64 bits, and an integer m, and sends back as 
output m 64-bit random integers x 1( x 2 , x^. That 

25 method is characterized by the following three steps: 

1) With the DES algorithm and using the key K, 
encrypt a value D representing date data and put the 
result in the integer variable I. 

2) For j in the range 1 to m, execute the 
30 following steps: 
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2) a) Replace s by s XOR I. 

2) b) Put in Xj the result of the encryption of 
s with the DES algorithm using the key K. 
2) c) Replace s with Xj XOR I. 

2) d) Put in s the result of the encryption of 
s with the DES algorithm using the secret key K. 

3) Return as output the succession (x 1# x 2 , 

It is possible to use this random number generator 
in an application for which the random number generator 
is already available, but is deemed to be of 
insufficient quality, e.g. a random number generator on 
board the microprocessor of a smart card. In which 
case, the above-described method is used to improve the 
quality of the random number generator. That method 
takes as input a random and secret integer s of size 64 
bits and an integer m, and it sends back as output m 
64 -bit random integers x x , x 2 , x n . The method uses 

the Data Encryption Standard (DES) with a secret key K 
which must be used only in that algorithm. The method 
uses a source S of quality deemed to be insufficient of 
random integers on 64 bits. The method is 

characterized by the following three steps: 
1) For j in the range 1 to m 

1) a) Generate an integer I by means of the 
source S . 

1) b) Replace s by s XOR I. 

1) c) Put in x.j the result of the encryption of 
s with the DES algorithm using the key K. 
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1) d) Generating an integer I by means of the 
source S . 

1) e) Replace s with Xj XOR I. 

1) f) Put in s the result of the encryption s 
5 with the DES algorithm using the key K. 

2) Return as output the succession (x 1# x 2 , 

xj - 

It has appeared that implementing a secret -key 
encryption algorithm (e.g. the DES algorithm) on a 
U; io smart card is vulnerable to attacks consisting of 

O differential analysis of current consumption or 

hj "Differential Power Analysis" (DPA) making it possible 

N ; to discover the secret key. The principle of such DPA 

m attacks is based on the fact that the power consumption 

y! ]5 of (i.e. the current consumed by) the microprocessor 

g executing instructions varies depending on the item of 

;£ data that is being manipulated. To discover the secret 

iij key, it is necessary for the input message or the 

output message of the encryption algorithm to be known. 
20 The two above-described methods of generating 

random numbers are thus vulnerable to attacks of the 
DPA type. The random numbers sent back as output by 
those two methods are output messages from the 
encryption algorithm. On the basis of the power 

25 consumption of the smart card, it is thus possible to 
discover the encryption key K, and thus then to predict 
the output of the random number generator. 

The method for the invention consists of a 
modification in the above-described methods of 
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generating random numbers so as to make them capable of 
withstanding DPA-type attacks. 

The first modified method for generating random 
numbers uses the Data Encryption Standard (DES) 
algorithm with a secret key K that must be used only in 
that algorithm. It takes as input a random and secret 
integer s of size 64 bits, and an integer m, and sends 
back as output m 64 -bit random integers x lf x 2 , . . . , x m . 
The method uses an intermediate integer variable y. 
The method is characterized by the following three 
steps : 

1) With the DES algorithm and using the key K, 
encrypt a value D representing date data and put the 
result in an integer variable I. 

2) For j in the range 1 to m, execute the 
following steps: 

2) a) Replace s by s XOR I. 

2) b) Put in the integer variable y the result 
of the encryption of s with the DES algorithm using the 
key K . 

2) c) Put in Xj the result of y XOR s. 
2) d) Replace s with y XOR I. 

2) e) Put in s the result of the encryption of 
s with the DES algorithm using the secret key K. 

3) Return as output the succession (x 1( x 2 , 

xj • 

In this improved method for generating random 
numbers, DPA-type current -measuring attack is 
impossible because the input and output messages of the 
DES encryption algorithm are not known. 
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The second improved method for generating random 
numbers is used to increase the quality of a random 
number generator whose quality is deemed to be 
insufficient. This method takes as input a random and 
5 secret integer s of size 64 bits and an integer m, and 
sends back as output m 64 -bit random integers x 1# x 2 , 
. . . , x^. The method uses the Data Encryption Standard 
(DES) with a secret key K which must be used only in 
that algorithm. The method uses a source S of quality 
10 deemed to be insufficient of random integers on 64 
bits. The method is characterized by the following two 
steps : 

1) For j in the range 1 to m: 

1) a) Generate an integer I by means of the 
15 source S . 

1) b) Replace s with s XOR I. 

1) c) Put in y the result of the encryption of 
s with the DES algorithm using the key K. 

1) d) Put in x t the result of y XOR s. 
20 1) e) Replace s with y XOR I. 

1) f) Put in s the result of the encryption s 
with the DES algorithm using the key K. 

2) Return as output the succession (x 1# x 2 , 

xj • 

25 In this improved method for generating random 

numbers, DPA-type current -measuring attack is 
impossible because the input and output messages of the 
DES encryption algorithm are not known. 

Both of the preceding methods of generating random 

30 numbers thus make it possible to obtain a random number 
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m 
a 



generator that withstands DPA-type current -measuring 
attacks . 



CLAIMS 



1/ A method for generating random numbers using 
the Data Encryption Standard (DES) algorithm with a 
secret key K that must be used only in that algorithm, 
said method taking as input a random and secret integer 
s of size 64 bits, and an integer m, said method 
sending back as output m 64 -bit random integers x 1# x 2 , 
. . - , x m , said method being characterized in that it 
comprises the following three steps: 

1) With the DES algorithm and using the key K, 
encrypt a value D representing date data and put the 
result in an integer variable I. 

2) For j in the range 1 to m: 
2) a) Replace s by s XOR I. 

2) b) Put in the integer variable y the result 
of the encryption of s with the DES algorithm using the 
key K. 

2) c) Put in x. the result of y XOR s. 
2) d) Replace s with y XOR I. 

2) e) Put in s the result of the encryption of 
s with the DES algorithm using the secret key K. 

3) Return as output the succession (x 17 x 2 , 

xj • 

2/ A method for generating random numbers making 
it possible to improve the quality of a random number 
generator whose quality is deemed to be insufficient, 
said method taking as input a random and secret integer 
s of size 64 bits and an integer m, and sending back as 
output m 64-bit random integers x x , x 2 , x m , said 



method using the Data Encryption Standard (DES) with a 
secret key K which must be used only in that algorithm, 
said method using an integer intermediate variable y, 
said method using a source S of quality deemed to be 
insufficient of random integers on 64 bits x 2 , x 2 , 
x m , said method being characterized in that it comprises 
the following two steps: 

1) For j in the range 1 to m: 

1) a) Generate an integer I by means of the 
source S . 

1) b) Replace s with s XOR I. 

1) c) Put in y the result of the encryption of 
s with the DES algorithm using the key K. 

1) d) Put in x ± the result of y XOR s. 
1) e) Replace s with y XOR I. 

1) f) Put in s the result of the encryption s 
with the DES algorithm using the key K. 

2) Return as output the succession (x lf x 2 , 

xj . 

3/ An electronic device implementing the method 
according to claim 1 or 2, said device being 
characterized in that it is a handheld, wearable, or 
portable device. 

4/ An electronic device according to claim 3, 
characterized in that it is a smart card. 

5/ An electronic device according to claim 3, 
characterized in that it is a contactless card. 

6/ An electronic device according to claim 3, 
characterized in that it is a Personal Computer Memory 
Card International Association (PCMCIA) card. 
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7/ An electronic device according to claim 3 

characterized in that it is a badge. 

8/ An electronic device according to claim 3 

characterized in that it is a smart watch. 



5 
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As a below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name; 

I believe I am the original, first and sole inventor (if only one name is listed below) or an original, first and joint 
inventor (if plural names are listed below) of the subject matter which is claimed and for which a patent is 
sought on the invention entitled: 



METHOD FOR IMPROVING A RANDOM NUMBER GENERATOR TO MAKE IT MORE 
RESISTANT AGAINST ATTACKS BY CURRENT MEASURING 



the specification of which (check only one item below): 
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I I was filed as United States Patent application 
Number on 
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^ was filed as PCT International application 
Number PCT/FR00/02009 on 12 July 2000 
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defined in Title 37, Code of Federal Regulations, § 1.56. 

I hereby claim foreign priority benefits under Title 35, United States Code, §§ 1 19 (a)-(d), 172 or 365 of any 
foreign application(s) for patent or inventor's certificate or of any international (PCT) application(s) designating 
at least one country other than the United States of America listed below and have also identified below any 
foreign application(s) for patent or inventor's certificate or any PCT international (PCT) application(s) 
designating at least one country other than the United States of America filed by me on the same subject matter 
having a filing date before that of the application(s) of which priority is claimed: 



PRIOR FOREIGN/PCT APPLICATION(S) AND ANY PRIORITY CLAIMS UNDER 35 U.S.C. §§119(a)-(d), 172 or 365: 


COUNTRY 
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the U.S. Patent and Trademark Office connected therewith and to file, prosecute and to transact all business in 
connection with international applications directed to said invention: 



William L. Mathis 


17,337 


Robert S. Swecker 


19,885 


Platon N. Mandros 


22,124 


Benton S. Duffett, Jr. 


22,030 


Norman H. Stepno 


22,716 


Ronald L. Grudziecki 


24,970 


Frederick G. Michaud, Jr. 


26,003 


Alan E. Kopecki 


25,813 


Regis E. Slutter 


26,999 


Samuel C. Miller, III 


27,360 


Robert G. Mukai 


28,531 


George A. Hovanec, Jr. 


28,223 


James A. LaBarre 


28,632 


E. Joseph Gess 


28,510 


R. Danny Huntington 


27,903 



Eric H. Weisblatt 


30,505 


James W. Peterson 


26,057 


Teresa Stanek Rea 


30,427 


Robert E. Krebs 


25,885 


William C. Rowland 


30,888 


T. Gene Dillahunty 


25,423 


Patrick C. Keane 
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William H. Benz 
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Peter K. Skiff 
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Richard J. McGrath 


29,195 


Matthew L. Schneider 
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Michael G. Savage 


32,596 


Gerald F. Swiss 
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Charles F. Wieland III 
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Bruce T. Wieder 
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Todd R. Walters 


34,040 


Ronni S. Jillions 
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Harold R. Brown III 


36,341 


Allen R. Baum 


36,086 


Brian P. O'Shaughnessy 


32,747 


Kenneth B. Leffler 


36,075 


Fred W. Hathaway 
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Wendi L. Weinstein 


34,456 


Mary Ann Dillahunty 
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Donna M. Meuth 
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Burns, Doane, Swecker & Mathis, L.L.P. 
P.O. Box 1404 

Alexandria, Virginia 223 13-1404 
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Address all telephone calls to: James A. LaBarre . ■ — ' _ at (703) 836-6620. 

I hereby declare that all statements made herein of my own knowledge are true and that all statements made on 
information and belief are believed to be true; and further that these statements were made with the knowledge 
that willful false statements and the like so made are punishable by fine or imprisonment, or both, under Section 
1001 of Title 18 of the United States Code and that such willful false statements may jeopardize the validity of 



the application or any patent issued thereon. 




FULL NAME OF SOLE OR FIRST INVENTOR 


iean-Sebastien CORON 


Signature 




Date 


2_>1/ 02-7^002. 


Residence (City, State, Country) 


Paris, France 


Citizenship 


French 
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